CVE-2025-57882
An improper resource shutdown or release vulnerability has been identified in the Click Plus C2-03CPU-2 device running firmware version 3.60. The vulnerability allows an unauthenticated attacker to perform a denial-of-service attack by exhausting all available device sessions in the Remote PLC application.
Scoring
- Severity
- HIGH
- CVSS base score
- 8.2
- CVSS vector
- CVSS:4.0/AV:N/AC:H/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N
- EPSS probability
- 0.33%
- CWE
- CWE-404
- Published
- 2025-09-23
- Last modified
- 2026-03-13
Affected products
- AutomationDirect CLICK PLUS C0-0x CPU firmware
- AutomationDirect CLICK PLUS C0-1x CPU firmware
- AutomationDirect CLICK PLUS C2-x CPU firmware
Weakness type
Related vulnerabilities
- CVE-2026-41869 — Apache Nutch: Unauthenticated forced shutdown and job interruption in Nutch Server (Nutch REST API)
- CVE-2026-86515 — vgmstream txtp txtp_parser.c add_entry resource consumption
- CVE-2026-86511 — java-json-tools jackson-coreutils JacksonUtils.java BigDecimal.toPlainString resource consumption
- CVE-2026-86319 — java-json-tools json-patch Patch Operation JsonPatch.java JsonPatch.apply resource consumption
- CVE-2026-85407 — Eleveo Quality Management Conversation events denial of service
- CVE-2026-85100 — 2FastLabs agent-squad Streaming Agent Response Workflow orchestrator.ts AgentSquad.routeRequest resource consumption
- CVE-2026-84887 — simular-ai Agent-S Model-generated GUI Action Execution Workflow grounding.py denial of service
- CVE-2026-84886 — simular-ai Agent-S OCR HTTP API ocr_server.py ImageData resource consumption